Index

Numerics

5GHz

daisy-chaining wireless mesh links, 155–157

DFS bands, 145

U-NII bands, 144

802.1X, 369

supplicant implementation on Cisco AP, 450–454

802.11, 10–11, 14. See also wireless networks

amendments, 13

authentication, 14

and broadcast delivery, 284

CCA (clear channel assessment), 97–98

cell of origin techniques, 306–307

examining client capabilities, 11–13

frames used for location services, 309–311

hotspots, 31

regulations, 33–37

RFID tags, 20

rogues, 417

RSSI trilateration, 307–309

802.11ax, 246

802.11e, 250. See also EDCA (Enhanced Distributed Channel Access) algorithm

802.11r, 184–185. See also RSN (robust security network)

A

AAA (authentication, authorization, and accounting), 16, 79, 369. See also security

design overview, 443

and FlexConnect, 222–224

RADIUS configuration on the wireless controller, 444

servers, 442–443

TACACS+ configuration, 444–445

ACLs (access control lists)

CPU, 454–456

FlexConnect

split tunnel, 227–228

VLAN, 225–227

ad-hoc rogues, 417

Air Quality reports, 434–435

AireOS controller

CMX Connect service configuration, 346

Fastlane, 275–277

implementing AVC, 272–275

implementing QoS, 260–263

interferers, 435–436

LWA configuration, 387–391

mDNS configuration, 295–297

QoS profiles, 258–260

alarms

Cisco DNA Center, 420

categories, 420–421

remediation, 421–422

Cisco PI (Prime Infrastructure), 416

customizing, 418

Rogue AP, 417–420

severity levels, 417

states, 417–418

amendments, 802.11, 13

anchor controller, 170

antennas, 14

leveraging, 103–105

omnidirectional, 156

for outdoor mesh networks, 145–147

patch, 103

signal strength, 60–61

AoA (Angle of Arrival), 308

AP-on-a-stick surveys, 54

AppleTV, 293, 294. See also mDNS (multicast DNS)

applications, real-time, 18–19, 106

APs, 18, 26, 29, 47, 67. See also DCA (Dynamic Channel Assignment); MAPs (mesh APs); RAPs (root APs); RRM (Cisco Radio Resource Manager)

authentication, 450–454

autonomous, 78

roaming, 168

bandwidth consumption, 78

ceiling- and wall-mounted, 73

above ceiling tiles, 74–75

below ceiling tiles, 74

cells, 87, 88

and data rates, 91–92

and SNR, 89–91

transmit power level, 113–114

usable coverage area, 92

channels, 33–34

separation, 97–98

choosing, 15–16

Cisco Wi-Fi mesh configuration, 152–153

configuring for location services, 316

coverage, 87

deployment models, 17, 59–61

data, 17–18, 98–99

location, 20–21, 61, 107–108

voice/video, 18–20, 105–107

DTPC (Dynamic Transmit Power Control), 93–94

education environments, 31

EIRP (effective isotropic radiated power), 34–36

expanding coverage, 94–98

fallback, 197

FlexConnect, 78, 213–214

groups, 221

grounding and securing, 75

in healthcare environments, 30

high availability, 193–195

in high-density wireless networks, 99–102

Layer 2 site surveys, 54–59

leveraging, 103–105

maximum transmit power, 13, 123

in mesh networks, 139–141, 153–155

mGig connection, 72

minimum signal level, 14

Office Extend, 237–238

oversubscription, 78–79

positioning, 47–48, 56–59, 105

post-deployment site surveys, 62–64

power, 27

prioritization, 195–196

rate-shifting points, 63

RF groups, 118–120

roaming, 167–168

802.11r amendment, 184–185

inter-controller, 168–171

intra-controller, 168

mobility groups, 171–176

optimizing AP scanning process, 176–177

optimizing AP selection, 176

optimizing with 802.11k assistance, 178–179

optimizing with 802.11v assistance, 179

optimizing with CXX assistance, 177–178

RSN, 179–182

security processes, 179

rogue, 417

transmit power capabilities, 92

transmit power level, 123–124

trilateration, 307–309

warehousing environments, 33

WIPS deployment, 352

attenuation, 26–28

authentication, 179

802.11, 14

CWA (Central Web Authentication) with ISE, 394–397

EAP (Extensible Authentication Protocol), 369–374

implementing on controllers, 374–380

LWA (Local Web Authentication), 386–387

with an anchor controller, 391–392

certificate provisioning on the wireless controller, 392–393

configuring on AireOS controller, 387–391

configuring on IOS-XE controller, 391

redirect and authentication process, 387

and self-registration, 393–394

pre-, 182

autonomous APs, roaming, 168

AVC (Application Visibility Control). See also QoS (Quality of Service)

configuring on AireOS controller, 272–275

implementation, 270–272

AWPP (Adaptive Wireless Path Protocol), 147–150

B

best practices, FlexConnect, 236–237

BLE (Bluetooth Low Energy), 305–306

blueprint studies, 37

Bluetooth, 53

Bonjour protocol, 293. See also mDNS (multicast DNS)

broadcast delivery, 284

BSA (basic service area), 87

BSS (basic service set), 87

building a troubleshooting method, 422–424

BYOD (Bring Your Own Device), 366, 385–386

CWA (Central Web Authentication) with ISE, 394–397

LWA (Local Web Authentication), 386–387

with an anchor controller, 391–392

certificate provisioning on the wireless controller, 392–393

configuring on AireOS controller, 387–391

redirect and authentication process, 387

and self-registration, 393–394

native supplicant provisioning, 397–398

C

CAPWAP, 76–79, 150

Message Aggregation, 224–225

CCA (clear channel assessment), 97–98, 132

CCKM (Cisco Centralized Key Management), 183

ceiling-mounted APs, 73

mounting above ceiling tiles, 74–75

mounting below ceiling tiles, 74

cells, 87, 88. See also RRM (Cisco Radio Resource Manager)

and data rates, 91–92

FRA (Flexible Radio Architecture), 104–105

in high-density wireless networks, 99–102

and receiver sensitivity, 88

and SNR, 89–91

transmit power level, 113–114

usable coverage area, 92

CEPT (European Conference of Postal and Telecommunications Administrations) bands, 34

Chanalyzer, 49–50, 52

channels, 12, 33, 34. See also DCA (Dynamic Channel Assignment)

aggregating, 96

CEPT (European Conference of Postal and Telecommunications Administrations) bands, 34

DFS (Dynamic Frequency Selection), 144–145

and FRA mode, 105

ISM (Industrial, Scientific, and Medical) bands, 34

in multi-AP environments, 96–97

separation, 97–98

U-NII (Unlicensed National Information Infrastructure) bands, 143–144

width, 91

CHDM (coverage hole detection mitigation), 127–128

choosing

APs, 15–16

remote office wireless deployment model, 212

survey type, 37–38

Cisco DNA Center, 7, 406

alarms, 420

categories, 420–421

remediation, 421–422

client troubleshooting, 431–433

dashboards, 412–414

interferers, 436

reports, 412

Trends and Insight menu, Network insight, 414–415

Cisco ISE (Identity Services Engine), 440

policy sets, 452–454

TACACS+ (Terminal Access Controller Access Control System Plus) profiles, 446–450

Cisco PI (Prime Infrastructure), 39, 359, 406

alarms, 416

customizing, 418

Rogue AP, 417

severity levels, 417

states, 417–418

client troubleshooting, 430–431

customizing RF calibration model, 362

interferers, 436

reports, 406–407

customizing, 411–412

scheduling and managing, 410–411

types, 407–410

clients. See also customers

authentication, implementing on controllers, 374–380

Cisco DNA center, troubleshooting, 431–433

Cisco PI, troubleshooting, 430–431

density, 15, 101

evaluating requirements, 10–11

examining 802.11 capabilities, 11–13

examining RF capabilities, 13–14

examining security capabilities, 14–15

local profiling configuration, 382–384

profiling, 380

principles, 380–381

process, 381–382

QoS implementation, 267

receiver sensitivity, 88

roaming, 64, 167–168

802.11r amendment, 184–185

on autonomous APs, 168

inter-controller, 168–171

intra-controller, 168

mobility groups, 171–176

optimizing AP scanning process, 176–177

optimizing AP selection, 176

optimizing with 802.11k assistance, 178–179

optimizing with 802.11v assistance, 179

optimizing with CXX assistance, 177–178

RSN, 179–182

security processes, 179

rogue, 417

transmit power capabilities, 92

troubleshooting on the controller, 426–430

WGB (Workgroup Bridge), 141

cloud services, 327–328

DNA Spaces, 314–315

deployment, 318–320

tracking mobile devices, 324

CMX (Cisco Connected Mobile Experience), 314. See also MSE (Mobility Services Engine)

Analytics service, 334–335

configuring widgets, 336–337

defining zones, 335–336

reports, 337–338

configuration, 317–318

Connect service, 333

dashboard, 342–343

implementing, 342–343

portal configuration, 346–348

WLC configuration, 343–345

customizing, 324–327

and DNA Spaces feature combination, 334

licenses, 333

Locate and Detect service, 333

services, 333

WIPS configuration, 353–356

COF (Coverage Overlap Factor), 129

collision domains, 246–247

commands

show advanced location summary, 363

show mesh config, 155

show run, 235–236

show wireless tag, 236

congestion, 19

control plane policing, 456

controllers, 313

AireOS

AVC configuration, 272–275

Fastlane, 275–277

interferers, 435–436

LWA configuration, 387–391

mDNS, 295–297

precious metal profiles, 258–260

QoS implementation, 260–263

anchor, 170

AP fallback, 197

AP prioritization, 195–196

certificate provisioning, 392–393

CMX Connect service configuration, 343–345

CPU ACLs, 454–456

detecting failures, 196–197

distribution system ports

LAG configuration, 192–193

foreign, 170

high availability, 197

N+1 redundancy, 197–198

N+N redundancy, 198–199

N+N+1 redundancy, 199

SSO redundancy, 200–201

implementing client authentication, 374–380

interference management tools, 434–436

IOS-XE

LWA configuration, 391

QoS implementation, 263–266

local client profiling, 382–384

location services configuration, 316

LSS (Location Specific Services), 294

LWA (Local Web Authentication), 386–387

mobility groups, 171–173

Mobility Announce messages, 173–175

validating mobility messages, 175–176

multicast delivery, 290–293

multicast delivery mode, 285–287

Multicast Direct configuration, 297–300

RADIUS configuration, 444

resiliency, 192–193

troubleshooting client issues, 426–430

cost metric (CM), 125

coverage, 26, 87. See also CHDM (coverage hole detection mitigation)

expanding with additional APs, 94–98

troubleshooting, 424–426

CPU ACLs (access control lists), 454–456

CSMA/CA (Carrier Sense Multiple Access with Collision Avoidance), 247

CSMA/CD (Carrier Sense Multiple Access with Collision Detection), 246

customers

evaluating requirements, 8–10

evaluating security requirements, 16–17

examining client 802.11 capabilities, 11–13

gathering information on devices, 11

interviewing, 9

touring their facilities, 9–10

customizing

Cisco PI reports, 411–412

CMX location services, 324–327

DNA Spaces, 327–328

RF calibration model on PI, 362

CWA (Central Web Authentication) with ISE, 394–397

D

dashboards, Cisco DNA Center, 412–414

data deployment model, 17–18, 98–99

data rates, 12–13, 18

and AP cells, 91–92

DRS (dynamic rate shifting), 92

and SNR, 91

dBm, 26–27, 50

DBS (Dynamic Bandwidth Selection), 125

DCA (Dynamic Channel Assignment), 124–127

metrics, 125

DCF (Distributed Coordination Function), 246–250. See also EDCA (Enhanced Distributed Channel Access)

CSMA/CA (Carrier Sense Multiple Access with Collision Avoidance), 247

DIFS (DCF Interframe Space) timer, 247–248

decibel(s), 50–51

deployment licenses, 79–80

RTU (Right to Use), 80

Smart, 80–81

deployment models

data, 17–18, 98–99

education, 31

enterprise office, 28–29

healthcare, 29–30

hospitality and hotels, 30–31

location, 20–21, 61, 107–108

manufacturing, 33

remote office, 210–212

retail, 31–32

small or home office, 29

voice/video, 18–20, 105–107

warehousing, 32–33

devices

C9800

AAA, 445–446

CleanAir, 434–435

client density, 15

customer, gathering information, 11

data rates, 12–13

examining client 802.11 capabilities, 11–13

rogue, 417

DFS (Dynamic Frequency Selection) channel, 12, 144–145

DHCP (Dynamic Host Configuration protocol), 79

distribution system, 192

DNA Spaces, 314–315

Analytics, 338

initial setup, 338–339

managing, 339–342

Captive Portals, 349

creating a new portal from a template, 350–351

creating a new portal from scratch, 349–350

and CMX feature combination, 334

customizing, 327–328

deployment, 318–320

licenses, 333

services, 334

tracking mobile devices, 324

drawings, wireless networks, 9

DRS (dynamic rate shifting), 92, 106

DTPC (Dynamic Transmit Power Control), 93–94

E

EAP (Extensible Authentication Protocol), 369

authentication methods, 372–374

implementing client authentication, 374–380

EDCA (Enhanced Distributed Channel Access) algorithm, 250

ACs (Access Categories), 250–253

AIFSN (Arbitrated Interframe Space Number), 253

CW (contention window) timer, 254

TSpec (Traffic Specification), 255–256

TXOP (Transmission Opportunity), 254–255

ED-RRM (Event-driven RRM), 127

education environments, 31

EIRP (effective isotropic radiated power), 34–36

Ekahau Pro, 39, 58

enterprise office environments, 28–29

ETSI (European Telecommunications Standards Institute), 33

regulations, 36

European countries, regulations, 36

evaluating

client requirements, 10–11

customer requirements, 8–10

security requirements, 16–17

events, 416

examining

client 802.11 capabilities, 11–13

client density, 15

client RF capabilities, 13–14

client security capabilities, 14–15

exclusion areas, CMX Analytics, 335

expanding, wireless coverage with additional APs, 94–98

F

Fastlane, 275–277

FastLocate, 316

FCC (Federal Communications Commission), 33, 35

regulations, 36

FFT (Fast Fourier Transform), 51

final preparation

accessing Pearson Test Prep software, 459–460

getting ready, 458–459

tools, 459–460

FlexConnect, 207, 212–213

AAA survivability, 222–224

ACLs (access control lists)

split tunnel, 227–228

VLAN, 225–227

best practices, 236–237

CAPWAP Message Aggregation, 224–225

groups

adding APs, 221

configuring, 219–220

creating, 220–221

implementing with AireOS, 215

configure the locally switched WLANs, 216

configure the native VLAN and WLAN-to-VLAN mapping, 217–219

convert the AP to FlexConnect mode, 215–216

implementing with IOS-XE controllers, 230–236

modes of operation, 213–214

OEAP (Office Extend AP), 237–238

resiliency scenarios, 222

Smart AP Image Upgrades, 228–230

WAN requirements, 214–215

foreign controller, 170

FRA (Flexible Radio Architecture), 104–105

FT (Fast BSS Transition), 184–185

FTM (Fine Timing Measurement), 61

G

GPS, 304

grounding, APs, 75

guest network services, 385

guest portals, 342

AUP (Acceptable Use Policy), 385–386

CMX Connect service, 342–343

portal configuration, 346–348

WLC configuration, 343–345

DNA Spaces Captive Portals, 349

creating a new portal from a template, 350–351

creating a new portal from scratch, 349–350

H

healthcare environments, 29–30

high availability

AP fallback, 197

APs, 193–195

prioritization, 195–196

controllers, 197

detecting failures, 196–197

N+1 redundancy, 197–198

N+N redundancy, 198–199

N+N+1 redundancy, 199

SSO redundancy, 200–201

MSE (Mobility Services Engine), 356–358

high-density wireless networks, 99–102

hospitality and hotel environments, 30–31

hotspots, 31

Hyperlocation, 308–309

verifying configuration, 362–364

I

IEEE 802.11. See 802.11

IGMP (Internet Group Management Protocol), 285

IGMP snooping, 288–290

Implement phase (PPDIOO process), 8

inclusion areas, CMX Analytics, 335

infrastructure

cell of origin techniques, 306–307

logical, 67

CAPWAP flow, 76–79

physical, 66

mGig (MultiGigabit) technology, 71–72

mounting APs, 72–75

PoE/PoE+, 69

power injectors, 71

inter-controller roaming, 168–171

interferers, 50–52

on Cisco PI and DNAC, 436

management tools, 434–436

surveying for, 53–54

well-known, 52–53

interviewing the customer, 9

intra-controller roaming, 168

IOS-XE controller

FlexConnect implementation, 230–236

implementing QoS, 263–266

LWA configuration, 391

ISM (Industrial, Scientific and Medical) bands, 34

J-K-L

jammers, 53

jitter, 19, 106

KPIs (Key Performance Indicators), 414

latency, 19, 106

Layer 1 site surveys, 38, 49–53

Layer 2 site surveys, 38, 54–59

leveraging, APs and antennas, 103–105

licenses

CMX (Cisco Connected Mobile Experience), 333

DNA Spaces, 333

limiting, transmit power levels, 102

location deployment model, 20–21, 61, 107–108

location engine, 314

MSE (Mobility Services Engine), 314

implementing WIPS, 351

initial installation, 316–317

verifying location accuracy, 361

location services, 308. See also CMX (Cisco Connected Mobile Experience); DNA Spaces

accuracy, 358

location requirements, 358–359

verifying AP settings, 360–361

AP configuration, 316

cell of origin techniques, 306–307

CMX (Cisco Connected Mobile Experience)

configuration, 317–318

customizing, 324–327

services and licenses, 333

tracking mobile devices, 320–324

WIPS configuration, 353–356

deployment, 312–313

DNA Spaces, 314–315

customizing, 327–328

deployment, 318–320

licenses, 333

tracking mobile devices, 324

FastLocate, 311

frames used for, 309–311

Hyperlocation, 308–309

indoor, 302–305

precision vs. accuracy, 311–312

RSSI trilateration, 307–309

WLC configuration, 316

logical infrastructure, 67

requirements, 76

AAA and DHCP services, 79

CAPWAP flow, 76–79

LWA (Local Web Authentication), 386–387

with an anchor controller, 391–392

certificate provisioning on the wireless controller, 392–393

configuring on AireOS controller, 387–391

redirect and authentication process, 387

M

MAC address, 309–310

manufacturing environments, 33

MAPs (mesh APs), 141–142

AWPP (Adaptive Wireless Path Protocol), 147–150

Ethernet bridging, 151–152

material attenuation, 26–28

MCS (Modulation and Coding Schemes), 54

mDNS (multicast DNS), 293–297

mesh networks, 138–139

APs, 139–141

architecture, 141

AWPP (Adaptive Wireless Path Protocol), 147–150

components, 139

daisy-chaining wireless mesh links, 155–157

DFS (Dynamic Frequency Selection) channel, 144–145

Ethernet bridging, 151–152

MAPs (mesh APs), 141–142

outdoor, antenna and mounting considerations, 145–147

RAPs (root APs), 141–142

site preparation and planning, 142

supported frequency bands, 143–144

traffic flow, 150–151

U-NII (Unlicensed National Information Infrastructure) bands, 143–144

WGB (Workgroup Bridge), 141, 158–159

configuring, 159–161

mGig (MultiGigabit) technology, 71–72

speeds and cable categories, 72

microwave ovens, 53

mobile devices, tracking

with CMX, 320–324

with DNA Spaces, 324

mobility groups

Mobility Announce messages, 173–175

validating mobility messages, 175–176

monitoring, 405, 406

mounting APs

above ceiling tiles, 74–75

below ceiling tiles, 74

ceiling and wall, 73

for outdoor mesh networks, 145–147

RAPs (root APs), 147

MSE (Mobility Services Engine), 314

HA (High Availability), 356–358

implementing WIPS, 351

initial installation, 316–317

verifying location accuracy, 361

multicast, 284–285

multicast delivery, 283

controllers, 285–287

IGMP (Internet Group Management Protocol), 285

IGMP snooping, 288–290

implementing on wireless networks, 290–293

mDNS (multicast DNS), 293–297

PIM (Protocol Independent Multicast), 285

in wireless networks, 285–288

Multicast Direct, 297–300

N

NAC (Network Admission Control), 450

narrow transmitters, 53

native supplicant provisioning, 397–398

NDP (Network Discovery Protocol), 115–118

advertisement fields, 117–118

and RSSI, 115–116

noise floor, 89

O

Office Extend, 237–238

offsite surveys

choosing the right type, 37

tools, 38–39

OKC (Opportunistic Key Caching), 182

omnidirectional antennas, 156

onsite surveys, 38, 44–45. See also site surveys

deployment considerations, 59–61

Layer 1, 49–53

Layer 2, 54–59

post-deployment, 62–64

tools, 38–39

types of, 38

validation, 54–55

walkthroughs, 46–48

Operate phase (PPDIOO process), 8

Optimize phase (PPDIOO process), 8

optimizing the roaming process

with 802.11k assistance, 178–179

with 802.11v assistance, 179

with CXX assistance, 177–178

security processes, 179

outdoor mesh networks, antenna and mounting considerations, 145–147

P

packet loss, 19, 106

passive surveys. See validation surveys

patch antennas, 103

positioning, 105

PBM (Plan-Build-Manage) process, 8

PCI (Payment Card Industry), 32

Pearson Test Prep software

accessing, 459–460

customizing your exams, 460–461

updating your exams, 461–462

perimeters, CMX Analytics, 335

physical infrastructure requirements, 66

grounding and securing APs, 75

mGig (MultiGigabit) technology, 71–72

mounting APs, 72–75

PoE/PoE+, 69

power injectors, 71

UPoE (Universal PoE), 69–70

UPoE/UPoE+, 69–70

PIM (Protocol Independent Multicast), 285

Plan phase (PPDIOO process), 7

PMKID (Pairwise Master Key ID) caching, 182

POA (point of attachment), 170–171

PoE (Power over Ethernet), 16, 69

PoE+, 69

POP (point of presence), 170–171

positioning

APs, 47–48, 56–59

patch antennas, 105

post-deployment site surveys, 38, 62–64

power

APs, 27

dBm, 50

EIRP (effective isotropic radiated power), 34–36

power injectors, 71

PPDIOO (Prepare, Plan, Design, Implement, Operate, Optimize) process, 7, 405

predictive surveys, 37, 39–41

Prepare phase (PPDIOO process), 7

priority value, AP configuration, 195–196

provisioning resources, 397

Q

QoS (Quality of Service), 15, 244–246. See also EDCA (Enhanced Distributed Channel Access) algorithm

Fastlane, 275–277

implementing

on AireOS controller, 260–263

on IOS-XE controller, 263–266

for wireless clients, 267

mapping and marking schemes between client and controller, 256–258

mapping DSCP to UP in the client, 268–269

marking scheme implementation, 267–268

precious metal profiles, 258–260

R

RADIUS, configuring on the wireless controller, 444

RAPs (root APs), 141–142

displaying the mesh configuration, 155

Ethernet bridging, 151–152

mounting, 147

real-time applications, 18–19, 106

receiver sensitivity, 14, 88

regulations, 33–37

remote office wireless deployment models, 210–212. See also FlexConnect

choosing, 212

reports

Air Quality, 434–435

Cisco DNA Center, 412

Cisco PI (Prime Infrastructure), 406–407

customizing, 411–412

scheduling and managing, 410–411

types, 407–410

CMX Analytics, 337–338

requirements, physical infrastructure, PoE, 69

resiliency

controllers, 192–193

FlexConnect, 222

retail environments, 31–32

RF (radio frequency), 33, 66

antennas, 14

examining client capabilities, 13–14

maximum transmit power, 13

propagation, 94

regulations, 33–37

troubleshooting coverage issues, 424–426

RF groups, 118–120

RFID tags, 20

roaming, 58, 63–64, 167–168

802.11r amendment, 184–185

association, 168

on autonomous APs, 168

CCKM (Cisco Centralized Key Management), 183

inter-controller, 168–171

intra-controller, 168

mobility groups, 171–173

Mobility Announce messages, 173–175

validating mobility messages, 175–176

OKC (Opportunistic Key Caching), 182

optimizing

with 802.11k assistance, 178–179

with 802.11v assistance, 179

AP scanning process, 176–177

AP selection, 176

with CXX assistance, 177–178

security processes, 179

PMKID (Pairwise Master Key ID) caching, 182

preauthentication, 182g

and real-time applications, 106

reassociation, 168

RSN (robust security network), 179–182

4-way handshake, 180

key generation process, 180–181

rogues, 417

RRM (Cisco Radio Resource Manager), 99, 113–114

CHDM (coverage hole detection mitigation), 127–128

DCA (Dynamic Channel Assignment), 124–127

metrics, 125

event-driven, 127

FRA (Flexible Radio Assignment) algorithm, 128–130

NDP (Network Discovery Protocol), 115–118

advertisement fields, 117–118

and RSSI, 115–116

RF groups, 118–120

RF neighborhoods, 119–120

RF profiles, 130–132

RxSOP (Receiver Start of Packet Threshold Detection), 132–134

TPC (Transmit Power Control) algorithm, 120–124

ideal transmit power, 123

RSN (robust security network), 179–182. See also OKC (Opportunistic Key Caching); PMKID (Pairwise Master Key ID) caching

4-way handshake, 180

key generation process, 180–181

RSSI (received signal strength indicator), 50, 60, 88–99

and NDP, 115–116

trilateration, 307–309, 313

RTLS (real-time location services), 20, 21, 107

RTU (Right to Use) licensing, 80

RxSOP (Receiver Start of Packet Threshold Detection), 132–134

S

security, 16–17. See also authentication

CCKM (Cisco Centralized Key Management), 183

client profiling, 380

local, 382–384

principles, 380–381

process, 381–382

examining client capabilities, 14–15

OKC (Opportunistic Key Caching), 182

PMKID (Pairwise Master Key ID) caching, 182

preauthentication, 182

RSN (robust security network), 179–182

WIPS (Wireless Intrusion Prevention System)

AP deployment, 352

CMX configuration, 353–356

implementing on MSE, 351

zero support, 30–31

self-registration, LWA (Local Web Authentication), 393–394

show advanced location summary command, 363

show mesh config command, 155

show run command, 235–236

show wireless tag command, 236

signal strength, 60–61

interferers, 50–51

surveying for, 53–54

well-known, 52–53

noise floor, 89

receiver sensitivity, 88

site surveys. See also surveys

choosing the right type, 37–38

deployment considerations, 59–61

Layer 1, 49–53

Layer 2, 54–59

offsite, types of, 38

onsite, 44–45

walkthroughs, 46–48

post-deployment, 62–64

predictive, 39–41

tools, 38–39, 54, 58

validation, 54–55

SKC (Secure Key Caching), 182

small or home office environments, 29

Smart Licensing, 80–81

smart spectrum analyzers, 51–52

SNR (signal-to-noise ratio), 14, 50, 60, 89–91

spectrum analyzers, 49, 51–52

Chanalyzer, 49–50

SAgE chip, 434

static IP tunneling, 171

surveys. See also deployment models

choosing the right type, 37–38

onsite, 38

post-deployment, 62–64

predictive site, 39–41

regulations, 33–37

tools, 38–39

validation, 54–55

sweep rate, 52

T

TACACS+ (Terminal Access Controller Access Control System Plus) profiles, 446–450

tools, 54

Ekahau Pro, 58

spectrum analyzers, 49, 51–52

Chanalyzer, 49–50, 52

touring customer facilities, 9–10

TPC (Transmit Power Control) algorithm, 120–124

ideal transmit power, 123

tracking mobile devices, with CMX, 320–324

transmit power level, 92, 113–114, 123–124. See also TPC (Transmit Power Control) algorithm

limiting, 102

trilateration, 307–309

troubleshooting, 406

building a method, 422–424

Cisco DNA Center client issues, 431–433

Cisco PI client issues, 430–431

client issues on the WLC, 426–430

interference, 434–436

RF coverage, 424–426

U

unicast delivery, 297

U-NII (Unlicensed National Information Infrastructure) bands, 143–144

UPoE (Universal PoE), 69–70

UPoE+, 69–70

user behavior, 47

user density, and wireless network design, 99–102

UWB (Ultra-Wide Band), 305

V

validation surveys, 54–55

video cameras, 53

voice/video deployment model, 18–20, 105–107

W

walkthroughs, 38, 46–48

wall-mounted APs, 73

WANs, FlexConnect requirements, 214–215

warehousing environments, 32–33

WGB (Workgroup Bridge), 138, 141, 158–159

configuring, 159–161

widgets, CMX Analytics, 336–337

Wi-Fi, 306. See also wireless networks

WIPS (Wireless Intrusion Prevention System)

AP deployment, 352

CMX configuration, 353–356

editing attack alarm properties, 355–356

editing SSIDs, 354

implementing on MSE, 351

wireless networks. See also APs; customers; deployment models; location services; QoS (Quality of Service); RRM (Cisco Radio Resource Manager)

antennas, 14

AoA (Angle of Arrival), 308

APs, 26, 29, 67

authentication, 450–454

cells, 87, 88

choosing, 15–16

deployment models, 59–61

DTPC (Dynamic Transmit Power Control), 93–94

expanding coverage, 94–98

grounding and securing, 75

high availability, 193–195

leveraging, 103–105

maximum transmit power, 13

minimum signal level, 14

oversubscription, 78–79

positioning, 47–48, 58, 59, 105

post-deployment site surveys, 62–64

rate-shifting points, 63

authentication framework, 369–371

building blocks, 190–191

call capacity, 107

channels, 12

controllers, resiliency, 192–193

deployment models, remote office, 210–212

drawings, 9

evaluating customer requirements, 8–10

examining client 802.11 capabilities, 11–13

high-density, 99–102

hotspots, 31

Hyperlocation, 308–309

indoor location services, 302–303, 304–305

BLE (Bluetooth Low Energy), 305–306

technical challenges, 304–305

UWB (Ultra-Wide Band), 305

interferers, 50–51

surveying for, 53–54

well-known, 52–53

material attenuation, 26–28

mesh architecture, 138–139, 141

antenna and mounting considerations for outdoor networks, 145–147

AWPP, 147–150

Cisco Wi-Fi mesh configuration, 152–153

components, 139

daisy-chaining wireless mesh links, 155–157

DFS (Dynamic Frequency Selection) channel, 144–145

Ethernet bridging, 151–152

MAPs (mesh APs), 141–142

mesh access points, 139–141

RAPs (root APs), 141–142

site preparation and planning, 142

supported frequency bands, 143–144

traffic flow, 150–151

WGBs, 158–161

multicast delivery, 285–288

implementation, 290–293

potential failure points, 191

PPDIOO process, 7–8

QoS (Quality of Service), 244–246

mapping and marking schemes between client and controller, 256–258

precious metal profiles, 258–260

receiver sensitivity, 14

roaming, 167–168

802.11r amendment, 184–185

on autonomous APs, 168

inter-controller, 168–171

intra-controller, 168

mobility groups, 171–173, 175–176

optimizing AP scanning process, 176–177

optimizing AP selection, 176

optimizing with 802.11k assistance, 178–179

optimizing with 802.11v assistance, 179

optimizing with CXX assistance, 177–178

RSN, 179–182

security processes, 179

security, 16–17

authentication, 14

troubleshooting

building a method, 422–424

U-NII (Unlicensed National Information Infrastructure) bands, 143–144

user behavior, 47

WLANs, customer requirements, 17

WLCs. See controllers

WMM (Wireless Multimedia), 245. See also EDCA (Enhanced Distributed Channel Access) algorithm

X-Y-Z

Yagna RF Wi-Fi site planner, 39

zero support, 30–31

zones, CMX Analytics, 335